[Opendnssec-user] ods-enforcerd: Segmentation fault

[Hoda Rohani]

Hello Thomas,

Please apply this patch:
https://github.com/opendnssec/opendnssec/commit/f29b483d6e157afb9e52e751a694a90193ea2326

Actually the previous patch had a bug when passing NULL string. I guess this patch will resolve your issue.

Regards,
Hoda

On 07-12-17 13:24, Thomas E. wrote:
> Hi!
> 
> For some reason the enforcerd suddenly died with a segmentation fault. The enforcer has been running for while without
> issues and suddenly it crashed.
> 
> The only difference to the runs it did before is that it ended up with the result that a DS record needed to be updated:
> 
> "[enforce_task] please submit DS with keytag 22922 for zone test.de"
> 
> These are the logs from the last run:
> 
> Dec  6 19:22:52 ods ods-enforcerd: [enforcer] updateZone: processing key f241eca9cc2dd5fa798ddf5a2b0cc3a7 1
> Dec  6 19:22:52 ods ods-enforcerd: [enforcer] updateZone: processing key 726d615a60d61a54e223ace3da7cd07c 1
> Dec  6 19:22:52 ods ods-enforcerd: [enforcer] updateZone: processing key 712850eb5fd42777c9a57dc4e94702d7 1
> Dec  6 19:22:52 ods ods-enforcerd: [enforcer] updateZone: processing key 74e8c23de67e15851a0d8b8b987a20db 1
> Dec  6 19:22:52 ods ods-enforcerd: [enforcer] updateZone: processing key 92ab7c79b96e994bc735c062814acd08 1
> Dec  6 19:22:52 ods ods-enforcerd: [enforcer] updateZone: processing key f5e958d5c501556480c0d0db331570bb 1
> Dec  6 19:22:52 ods ods-enforcerd: [enforcer] updateZone: processing key 0a18212e851969c77182447fcdce863c 1
> Dec  6 19:22:52 ods ods-enforcerd: [enforcer] updateZone: processing key a2b814b5ed20b9ab08f2b2a8f6b25aad 1
> Dec  6 19:22:52 ods ods-enforcerd: [enforcer] updateZone: May ZSK a2b814b5ed20b9ab08f2b2a8f6b25aad DNSKEY in state
> omnipresent transition to unretentive?
> Dec  6 19:22:52 ods ods-enforcerd: [enforcer] updateZone Policy says we can (1/3)
> Dec  6 19:22:52 ods ods-enforcerd: [enforcer] updateZone: May ZSK a2b814b5ed20b9ab08f2b2a8f6b25aad RRSIG in state
> unretentive transition to hidden?
> Dec  6 19:22:52 ods ods-enforcerd: [enforcer] updateZone Policy says we can (1/3)
> Dec  6 19:22:52 ods ods-enforcerd: [enforcer] updateZone: processing key 40217e390dabe3ffd572d23d05830d79 4
> Dec  6 19:22:52 ods ods-enforcerd: [enforcer] updateZone: processing key 0426252c04a4cc3419b18e41a027b530 1
> Dec  6 19:22:52 ods ods-enforcerd: [enforcer] updateZone: May ZSK 0426252c04a4cc3419b18e41a027b530 RRSIG in state
> rumoured transition to omnipresent?
> Dec  6 19:22:52 ods ods-enforcerd: [enforcer] updateZone Policy says we can (1/3)
> Dec  6 19:22:52 ods ods-enforcerd: [enforcer] updateZone DNSSEC says we can (2/3)
> Dec  6 19:22:52 ods ods-enforcerd: [enforce_task] please retract DS with keytag 47476 for zone test.de
> Dec  6 19:22:52 ods ods-enforcerd: [enforce_task] please submit DS with keytag 22922 for zone test.de
> Dec  6 19:22:52 ods ods-enforcerd: Segmentation fault
> Dec  6 19:22:52 ods ods-enforcerd: :
> Dec  6 19:22:52 ods ods-enforcerd:   inlined method
> Dec  6 19:22:52 ods ods-enforcerd:   inlined method
> Dec  6 19:22:52 ods ods-enforcerd:   keystate/keystate_ds.c:150 in exec_dnskey_by_id()
> Dec  6 19:22:52 ods ods-enforcerd:   keystate/keystate_ds.c:231 in retract_dnskey_by_id()
> Dec  6 19:22:52 ods ods-enforcerd:   keystate/keystate_ds.c:402 in change_keys_from_to()
> Dec  6 19:22:52 ods ods-enforcerd: keystate/keystate_ds_retract_task.c:44 in keystate_ds_retract_task_perform()
> Dec  6 19:22:52 ods ods-enforcerd:   scheduler/task.c:120 in task_perform()
> Dec  6 19:22:52 ods ods-enforcerd:   scheduler/worker.c:71 in worker_start()
> Dec  6 19:22:52 ods ods-enforcerd: /root/opendnssec-2.1.3/common/janitor.c:306 in runthread()
> Dec  6 19:22:52 ods ods-enforcerd:   inlined method
> Dec  6 19:22:52 ods ods-enforcerd:   inlined method
> Dec  6 19:22:52 ods ods-enforcerd:   inlined method
> Dec  6 19:22:52 ods ods-enforcerd: Threaddump
> Dec  6 19:22:52 ods ods-enforcerd: :
> Dec  6 19:22:52 ods ods-enforcerd:   inlined method
> Dec  6 19:22:52 ods ods-enforcerd:   inlined method
> Dec  6 19:22:52 ods ods-enforcerd:   inlined method
> Dec  6 19:22:52 ods ods-enforcerd:   scheduler/task.c:117 in task_perform()
> Dec  6 19:22:52 ods ods-enforcerd:   scheduler/worker.c:71 in worker_start()
> Dec  6 19:22:52 ods ods-enforcerd: /root/opendnssec-2.1.3/common/janitor.c:306 in runthread()
> Dec  6 19:22:52 ods ods-enforcerd:   inlined method
> Dec  6 19:22:52 ods ods-enforcerd:   inlined method
> Dec  6 19:22:52 ods ods-enforcerd:   inlined method
> Dec  6 19:22:52 ods ods-enforcerd: Threaddump
> Dec  6 19:22:52 ods ods-enforcerd: :
> Dec  6 19:22:52 ods ods-enforcerd:   inlined method
> Dec  6 19:22:52 ods ods-enforcerd:   inlined method
> Dec  6 19:22:52 ods ods-enforcerd:   inlined method
> Dec  6 19:22:52 ods ods-enforcerd:   scheduler/task.c:117 in task_perform()
> Dec  6 19:22:52 ods ods-enforcerd:   scheduler/worker.c:71 in worker_start()
> Dec  6 19:22:52 ods ods-enforcerd: /root/opendnssec-2.1.3/common/janitor.c:306 in runthread()
> Dec  6 19:22:52 ods ods-enforcerd:   inlined method
> Dec  6 19:22:52 ods ods-enforcerd:   inlined method
> Dec  6 19:22:52 ods ods-enforcerd:   inlined method
> Dec  6 19:22:52 ods ods-enforcerd: Threaddump
> Dec  6 19:22:52 ods ods-enforcerd: :
> Dec  6 19:22:52 ods ods-enforcerd:   inlined method
> Dec  6 19:22:52 ods ods-enforcerd: /root/opendnssec-2.1.3/common/locks.c:63 in ods_thread_wait()
> Dec  6 19:22:52 ods ods-enforcerd:   scheduler/schedule.c:465 in schedule_pop_task()
> Dec  6 19:22:52 ods ods-enforcerd:   scheduler/worker.c:68 in worker_start()
> Dec  6 19:22:52 ods ods-enforcerd: /root/opendnssec-2.1.3/common/janitor.c:306 in runthread()
> Dec  6 19:22:52 ods ods-enforcerd:   inlined method
> Dec  6 19:22:52 ods ods-enforcerd:   inlined method
> Dec  6 19:22:52 ods ods-enforcerd:   inlined method
> Dec  6 19:22:52 ods ods-enforcerd: Threaddump
> Dec  6 19:22:52 ods ods-enforcerd: :
> Dec  6 19:22:52 ods ods-enforcerd:   inlined method
> Dec  6 19:22:52 ods ods-enforcerd: /root/opendnssec-2.1.3/common/cmdhandler.c:388 in cmdhandler_start()
> Dec  6 19:22:52 ods ods-enforcerd: /root/opendnssec-2.1.3/common/janitor.c:306 in runthread()
> Dec  6 19:22:52 ods ods-enforcerd:   inlined method
> Dec  6 19:22:52 ods ods-enforcerd:   inlined method
> Dec  6 19:22:52 ods ods-enforcerd:   inlined method
> 
> 
> Restarting is now ending up with this error:
> 
> Starting enforcer...
> OpenDNSSEC key and signing policy enforcer version 2.1.3
> Unable to connect to engine. connect() failed: Connection refused ("/var/run/opendnssec/enforcer.sock")
> 
> Any help would be much appreciated!
> 
> Thanks,
> Thomas
> 
> _______________________________________________
> Opendnssec-user mailing list
> Opendnssec-user at lists.opendnssec.org
> https://lists.opendnssec.org/mailman/listinfo/opendnssec-user